forgebadger 0.1.0 → 0.1.2

package/dist/gateway/src/config-generation/writer.js

@@ -1,4 +1,5 @@
 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { closeSync, constants, mkdirSync, openSync, rmSync, writeFileSync } from "node:fs";
 import { randomUUID } from "node:crypto";
 import { dirname, join } from "node:path";
 import { safeResolve } from "../lib/safe-resolve.js";
@@ -32,6 +33,7 @@ export async function writeConfigPlan(plan, options = {}) {
     const skippedFiles = [];
     try {
         for (const file of plan.files) {
+            options.beforeWrite?.();
             const conflict = conflicts.find((current) => current.relativePath === file.relativePath);
             const decision = conflict?.conflictType === "exists"
                 ? (options.decisions?.[file.relativePath] ?? "skip")
@@ -45,6 +47,23 @@ export async function writeConfigPlan(plan, options = {}) {
             if (options.failBeforeWrite === file.relativePath) {
                 throw new Error(`Injected write failure for ${file.relativePath}`);
             }
+            if (options.createOnly) {
+                const absolutePath = safeResolve(plan.targetRoot, file.relativePath);
+                mkdirSync(dirname(absolutePath), { recursive: true });
+                options.beforeWrite?.();
+                if (safeResolve(plan.targetRoot, file.relativePath) !== absolutePath)
+                    throw new Error("Config parent path changed");
+                const fd = openSync(absolutePath, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | (constants.O_NOFOLLOW ?? 0), 0o600);
+                appliedWrites.push({ relativePath: file.relativePath, absolutePath, created: true });
+                try {
+                    writeFileSync(fd, file.content, "utf8");
+                }
+                finally {
+                    closeSync(fd);
+                }
+                writtenFiles.push(file.relativePath);
+                continue;
+            }
             const absolutePath = safeResolve(plan.targetRoot, file.relativePath);
             const existingContent = await readExistingFile(absolutePath);
             const backupFile = existingContent === undefined
@@ -74,7 +93,7 @@ export async function writeConfigPlan(plan, options = {}) {
         };
     }
     catch (error) {
-        const rollbackResult = await rollbackAppliedWrites(appliedWrites, options);
+        const rollbackResult = await rollbackAppliedWrites(appliedWrites, plan.targetRoot, options);
         const outcome = rollbackResult.success ? "rolled_back" : "rollback_failed";
         return {
             writtenFiles,
@@ -111,7 +130,7 @@ async function readExistingFile(absolutePath) {
         throw error;
     }
 }
-async function rollbackAppliedWrites(appliedWrites, options) {
+async function rollbackAppliedWrites(appliedWrites, targetRoot, options) {
     const restoredFiles = [];
     const removedFiles = [];
     const failedFiles = [];
@@ -121,7 +140,14 @@ async function rollbackAppliedWrites(appliedWrites, options) {
                 throw new Error(`Injected rollback failure for ${write.relativePath}`);
             }
             if (write.created) {
-                await rm(write.absolutePath, { force: true });
+                if (options.createOnly) {
+                    if (safeResolve(targetRoot, write.relativePath) !== write.absolutePath)
+                        throw new Error("Config rollback path changed");
+                    rmSync(write.absolutePath, { force: true });
+                }
+                else {
+                    await rm(write.absolutePath, { force: true });
+                }
                 removedFiles.push(write.relativePath);
                 continue;
             }

package/dist/gateway/src/config-generation/writer.js.map

@@ -1 +1 @@
-{"version":3,"file":"writer.js","sourceRoot":"","sources":["../../../src/config-generation/writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAmBvD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,SAAS,CAAmB;IAErC,YAAY,OAAe,EAAE,SAA2B;QACtD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAgB,EAChB,UAAkC,EAAE;IAEpC,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;QACtD,IAAI,QAAQ,CAAC,YAAY,KAAK,aAAa,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,gBAAgB,CAAC,0CAA0C,EAAE,iBAAiB,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAmB,EAAE,CAAC;IACzC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC;YACzF,MAAM,QAAQ,GACZ,QAAQ,EAAE,YAAY,KAAK,QAAQ;gBACjC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC;gBACpD,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;oBACxC,CAAC,CAAC,WAAW,CAAC;YACpB,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YAED,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACrE,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAC7D,MAAM,UAAU,GACd,eAAe,KAAK,SAAS;gBAC3B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;YAE5E,MAAM,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,YAAY,GAAiB;gBACjC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,YAAY;gBACZ,OAAO,EAAE,eAAe,KAAK,SAAS;aACvC,CAAC;YACF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,YAAY,CAAC,UAAU,GAAG,UAAU,CAAC;YACvC,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC;QAED,OAAO;YACL,YAAY;YACZ,YAAY;YACZ,UAAU;YACV,SAAS;YACT,OAAO,EAAE,SAAS;YAClB,WAAW,EAAE,EAAE;YACf,iBAAiB,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC;SAC5C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC3E,OAAO;YACL,YAAY;YACZ,YAAY;YACZ,UAAU;YACV,SAAS;YACT,OAAO;YACP,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;YACjE,iBAAiB,EAAE,KAAK;YACxB,cAAc;SACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAgB,EAAE,UAAmB;IAC5D,MAAM,IAAI,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAC7F,2EAA2E;IAC3E,4CAA4C;IAC5C,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,UAAkB,EAClB,YAAoB,EACpB,OAAe;IAEf,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAClD,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,YAAoB;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,aAA6B,EAC7B,OAA+B;IAE/B,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9C,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACtC,SAAS;YACX,CAAC;YAED,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC/D,MAAM,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;gBAC3D,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa;QACb,YAAY;QACZ,WAAW;QACX,OAAO,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}
+{"version":3,"file":"writer.js","sourceRoot":"","sources":["../../../src/config-generation/writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAqBvD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,SAAS,CAAmB;IAErC,YAAY,OAAe,EAAE,SAA2B;QACtD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAgB,EAChB,UAAkC,EAAE;IAEpC,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;QACtD,IAAI,QAAQ,CAAC,YAAY,KAAK,aAAa,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,gBAAgB,CAAC,0CAA0C,EAAE,iBAAiB,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAmB,EAAE,CAAC;IACzC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC;YACzF,MAAM,QAAQ,GACZ,QAAQ,EAAE,YAAY,KAAK,QAAQ;gBACjC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC;gBACpD,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;oBACxC,CAAC,CAAC,WAAW,CAAC;YACpB,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YAED,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;gBACrE,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtD,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBACpH,MAAM,EAAE,GAAG,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBAClI,aAAa,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrF,IAAI,CAAC;oBAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAC3E,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACrE,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAC7D,MAAM,UAAU,GACd,eAAe,KAAK,SAAS;gBAC3B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;YAE5E,MAAM,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,YAAY,GAAiB;gBACjC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,YAAY;gBACZ,OAAO,EAAE,eAAe,KAAK,SAAS;aACvC,CAAC;YACF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,YAAY,CAAC,UAAU,GAAG,UAAU,CAAC;YACvC,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC;QAED,OAAO;YACL,YAAY;YACZ,YAAY;YACZ,UAAU;YACV,SAAS;YACT,OAAO,EAAE,SAAS;YAClB,WAAW,EAAE,EAAE;YACf,iBAAiB,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC;SAC5C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5F,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC3E,OAAO;YACL,YAAY;YACZ,YAAY;YACZ,UAAU;YACV,SAAS;YACT,OAAO;YACP,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;YACjE,iBAAiB,EAAE,KAAK;YACxB,cAAc;SACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAgB,EAAE,UAAmB;IAC5D,MAAM,IAAI,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAC7F,2EAA2E;IAC3E,4CAA4C;IAC5C,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,UAAkB,EAClB,YAAoB,EACpB,OAAe;IAEf,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAClD,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,YAAoB;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,aAA6B,EAC7B,UAAkB,EAClB,OAA+B;IAE/B,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;oBACvB,IAAI,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,KAAK,KAAK,CAAC,YAAY;wBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;oBACxH,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9C,CAAC;qBAAM,CAAC;oBACN,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChD,CAAC;gBACD,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACtC,SAAS;YACX,CAAC;YAED,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC/D,MAAM,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;gBAC3D,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa;QACb,YAAY;QACZ,WAAW;QACX,OAAO,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}

package/dist/gateway/src/db/migrations/0097_telegram_channel_accounts.sql

@@ -0,0 +1,7 @@
+CREATE TABLE `telegram_channel_accounts` (`id` text PRIMARY KEY NOT NULL, `user_id` text NOT NULL, `bot_token_encrypted` text NOT NULL, `bot_username` text, `enabled` integer DEFAULT false NOT NULL, `connection_state` text DEFAULT 'disabled' NOT NULL, `last_connected_at` integer, `last_error_code` text, `last_error_message` text, `config_revision` integer DEFAULT 1 NOT NULL, `created_at` integer, `updated_at` integer, FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `idx_telegram_channel_accounts_user` ON `telegram_channel_accounts` (`user_id`);
+--> statement-breakpoint
+CREATE TABLE `integration_telegram_configs` (`id` text PRIMARY KEY NOT NULL, `user_id` text NOT NULL, `enabled` integer DEFAULT false NOT NULL, `emergency_disabled` integer DEFAULT false NOT NULL, `allowed_chat_ids` text DEFAULT '[]' NOT NULL, `created_at` integer, `updated_at` integer, FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `idx_integration_telegram_configs_user` ON `integration_telegram_configs` (`user_id`);

package/dist/gateway/src/db/migrations/0098_skill_remote_provenance.sql

@@ -0,0 +1 @@
+ALTER TABLE skills ADD COLUMN remote_provenance text;

package/dist/gateway/src/db/migrations/0099_runtime_settings.sql

@@ -0,0 +1 @@
+CREATE TABLE `runtime_settings` (`key` text PRIMARY KEY NOT NULL, `value` text NOT NULL, `updated_at` integer NOT NULL, `updated_by` text);

package/dist/gateway/src/db/migrations/0100_runtime_confirmation_revocation.sql

@@ -0,0 +1,27 @@
+CREATE TABLE `__new_session_runtime_confirmations` (
+ user_id text NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+ session_id text NOT NULL,
+ runtime_name text NOT NULL,
+ launch_nonce text NOT NULL UNIQUE,
+ daemon_pid integer NOT NULL CHECK(daemon_pid > 0),
+ daemon_started_at text NOT NULL,
+ status text NOT NULL CHECK(status IN ('pending','stopped','revoked')),
+ receipt_json text,
+ updated_at integer NOT NULL,
+ PRIMARY KEY(user_id,session_id),
+ FOREIGN KEY(user_id,session_id) REFERENCES sessions(user_id,id) ON DELETE CASCADE,
+ CHECK((status='pending' AND receipt_json IS NULL) OR (status='stopped' AND receipt_json IS NOT NULL) OR (status='revoked' AND receipt_json IS NULL))
+);
+--> statement-breakpoint
+INSERT INTO `__new_session_runtime_confirmations` SELECT * FROM session_runtime_confirmations;
+--> statement-breakpoint
+DROP TABLE session_runtime_confirmations;
+--> statement-breakpoint
+ALTER TABLE `__new_session_runtime_confirmations` RENAME TO session_runtime_confirmations;
+--> statement-breakpoint
+CREATE TRIGGER preserve_pending_runtime_confirmation
+BEFORE DELETE ON session_runtime_confirmations
+WHEN OLD.status = 'pending'
+BEGIN
+ SELECT RAISE(ABORT, 'SESSION_RUNTIME_STOP_UNCONFIRMED');
+END;

package/dist/gateway/src/db/migrations/0101_provider_private_networks.sql

@@ -0,0 +1,7 @@
+-- Per-provider opt-in to trusted private / loopback endpoint addresses
+-- (e.g. a local Ollama or vLLM server on 127.0.0.1). Only the
+-- private/loopback/link-local IP blocklist and loopback hostname checks are
+-- relaxed; cloud metadata hosts (169.254.169.254, *.metadata.google.internal),
+-- `.internal` names, and credentials-in-URL remain blocked.
+ALTER TABLE `model_provider_profiles`
+  ADD COLUMN `allow_private_networks` integer DEFAULT 0 NOT NULL CHECK (`allow_private_networks` IN (0, 1));

package/dist/gateway/src/db/migrations/0102_copilot_preferences.sql

@@ -0,0 +1,4 @@
+-- Server-side persistence of the Copilot model + thinking-strength
+-- preferences. user_settings.model_id (previously unused) is reused as the
+-- preferred Copilot model; copilot_thinking_effort stores off|low|medium|high.
+ALTER TABLE `user_settings` ADD COLUMN `copilot_thinking_effort` TEXT;

package/dist/gateway/src/db/migrations/0103_model_thinking_efforts.sql

@@ -0,0 +1,8 @@
+-- Per-model thinking-strength declaration for Model Center -> CLI config sync.
+-- support_efforts is a JSON array of levels (low|medium|high|xhigh|max);
+-- default_effort is nullable (NULL = the CLI keeps its own default).
+-- The Kimi Code adapter writes both into the model alias entry in
+-- ~/.kimi-code/config.toml (support_efforts / default_effort keys).
+ALTER TABLE `model_profiles` ADD COLUMN `support_efforts` TEXT NOT NULL DEFAULT '[]';
+--> statement-breakpoint
+ALTER TABLE `model_profiles` ADD COLUMN `default_effort` TEXT;

package/dist/gateway/src/db/migrations/0104_copilot_project_autonomy.sql

@@ -0,0 +1 @@
+ALTER TABLE `projects` ADD `copilot_autonomy` integer DEFAULT false NOT NULL;

package/dist/gateway/src/db/migrations/0105_remove_copilot_grants.sql

@@ -0,0 +1,91 @@
+-- 0105_remove_copilot_grants.sql
+-- 删除 Copilot grant 体系：copilot_grants / copilot_conversation_grants（0069 建）；
+-- platform_action_intents 重建去掉 grant 两列（grant_id 被原表 FK 命名，不能 DROP COLUMN，数据保留）；
+-- channel_routes 重建改为绑定项目 project_id（存量路由引用已删除的 grant，丢弃，需重新配对）。
+-- 路由被整体丢弃，挂在路由上的渠道收件/投递记录随之清除（外键链：
+-- channel_deliveries / channel_message_events → channel_messages → channel_routes），
+-- 否则重建后的空 channel_routes 会让存量 channel_messages 成为悬挂外键，
+-- 启动时的 PRAGMA foreign_key_check 将拒绝启动。
+-- Drizzle executes migrations in a transaction. foreign_keys=OFF has no effect
+-- once that transaction has begun; defer the child references while rebuilding.
+PRAGMA defer_foreign_keys=ON;
+--> statement-breakpoint
+DELETE FROM channel_deliveries;
+--> statement-breakpoint
+DELETE FROM channel_message_events;
+--> statement-breakpoint
+DELETE FROM channel_messages;
+--> statement-breakpoint
+DROP TABLE channel_routes;
+--> statement-breakpoint
+CREATE TABLE channel_routes (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  identity_id TEXT NOT NULL,
+  project_id TEXT NOT NULL,
+  conversation_id TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'active',
+  revision INTEGER NOT NULL DEFAULT 1,
+  created_at INTEGER NOT NULL,
+  FOREIGN KEY(user_id,identity_id) REFERENCES channel_identities(user_id,id) ON DELETE CASCADE,
+  FOREIGN KEY(user_id,project_id) REFERENCES projects(user_id,id) ON DELETE CASCADE,
+  FOREIGN KEY(user_id,conversation_id) REFERENCES copilot_conversations(user_id,id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_channel_route_tenant ON channel_routes(user_id,id);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_channel_route_active ON channel_routes(user_id,identity_id) WHERE status='active';
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_channel_route_conversation ON channel_routes(user_id,conversation_id);
+--> statement-breakpoint
+-- DROP TABLE applies ON DELETE CASCADE to receipts even with deferred foreign
+-- keys. Preserve them explicitly until the replacement intent table exists.
+CREATE TEMP TABLE platform_action_receipts_saved AS SELECT * FROM platform_action_receipts;
+--> statement-breakpoint
+CREATE TABLE platform_action_intents_next (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  actor_user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  authority TEXT NOT NULL,
+  command_id TEXT NOT NULL,
+  input_json TEXT NOT NULL,
+  digest TEXT NOT NULL,
+  resources_json TEXT NOT NULL,
+  policy_version INTEGER NOT NULL,
+  expires_at INTEGER NOT NULL,
+  idempotency_key TEXT NOT NULL,
+  status TEXT NOT NULL,
+  created_at INTEGER NOT NULL,
+  execution_owner TEXT,
+  execution_lease_expires_at INTEGER,
+  channel_conversation_id TEXT,
+  origin_kind TEXT NOT NULL DEFAULT 'legacy',
+  origin_run_id TEXT,
+  origin_step_id TEXT,
+  UNIQUE(user_id,idempotency_key),
+  UNIQUE(user_id,id)
+);
+--> statement-breakpoint
+INSERT INTO platform_action_intents_next (id,user_id,actor_user_id,authority,command_id,input_json,digest,resources_json,policy_version,expires_at,idempotency_key,status,created_at,execution_owner,execution_lease_expires_at,channel_conversation_id,origin_kind,origin_run_id,origin_step_id)
+SELECT id,user_id,actor_user_id,authority,command_id,input_json,digest,resources_json,policy_version,expires_at,idempotency_key,status,created_at,execution_owner,execution_lease_expires_at,channel_conversation_id,origin_kind,origin_run_id,origin_step_id FROM platform_action_intents;
+--> statement-breakpoint
+DROP TABLE platform_action_intents;
+--> statement-breakpoint
+ALTER TABLE platform_action_intents_next RENAME TO platform_action_intents;
+--> statement-breakpoint
+CREATE INDEX idx_platform_action_execution_lease ON platform_action_intents(user_id,status,execution_lease_expires_at);
+--> statement-breakpoint
+INSERT INTO platform_action_receipts (intent_id,user_id,outcome,result_json,created_at)
+SELECT saved.intent_id,saved.user_id,saved.outcome,saved.result_json,saved.created_at
+FROM platform_action_receipts_saved AS saved
+WHERE NOT EXISTS (SELECT 1 FROM platform_action_receipts AS current WHERE current.intent_id=saved.intent_id);
+--> statement-breakpoint
+DROP TABLE platform_action_receipts_saved;
+--> statement-breakpoint
+-- 最后删 grant 两表：旧 platform_action_intents（含 grant_id FK）已在上方重建移除，
+-- 避免 DROP 父表时被子表外键阻断。
+DROP TABLE copilot_conversation_grants;
+--> statement-breakpoint
+DROP TABLE copilot_grants;
+--> statement-breakpoint
+PRAGMA defer_foreign_keys=OFF;

package/dist/gateway/src/db/migrations/0106_mcp_cli_dispatch_scope.sql

@@ -0,0 +1,3 @@
+ALTER TABLE `mcp_access_tokens` ADD `allowed_root` text;
+--> statement-breakpoint
+ALTER TABLE `mcp_access_tokens` ADD `expires_at` integer;

package/dist/gateway/src/db/migrations/0107_cli_skill_revisions.sql

@@ -0,0 +1,12 @@
+CREATE TABLE `cli_skill_revisions` (
+  `id` text PRIMARY KEY NOT NULL,
+  `user_id` text NOT NULL REFERENCES `users`(`id`) ON DELETE CASCADE,
+  `skill_id` text NOT NULL,
+  `action` text NOT NULL CHECK (`action` IN ('install','update','rollback','legacy')),
+  `snapshot_json` text NOT NULL,
+  `package_hash` text NOT NULL,
+  `created_at` integer NOT NULL,
+  FOREIGN KEY (`skill_id`,`user_id`) REFERENCES `skills`(`id`,`user_id`) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE INDEX `idx_cli_skill_revisions_owner` ON `cli_skill_revisions` (`user_id`,`skill_id`,`created_at`);

package/dist/gateway/src/db/migrations/0108_copilot_run_governance.sql

@@ -0,0 +1,43 @@
+ALTER TABLE copilot_runs ADD COLUMN execution_phase text NOT NULL DEFAULT 'queued';
+--> statement-breakpoint
+ALTER TABLE copilot_runs ADD COLUMN phase_started_at integer;
+--> statement-breakpoint
+ALTER TABLE copilot_runs ADD COLUMN token_budget integer NOT NULL DEFAULT 500000;
+--> statement-breakpoint
+ALTER TABLE copilot_runs ADD COLUMN max_duration_ms integer NOT NULL DEFAULT 1800000;
+--> statement-breakpoint
+UPDATE copilot_runs SET execution_phase = CASE WHEN status = 'awaiting_approval' THEN 'awaiting_approval' WHEN status IN ('completed','stopped','failed','cancelled','indeterminate') THEN 'finished' ELSE 'queued' END;
+--> statement-breakpoint
+CREATE TABLE copilot_model_calls (
+  id text PRIMARY KEY NOT NULL,
+  user_id text NOT NULL,
+  run_id text NOT NULL,
+  kind text NOT NULL,
+  status text NOT NULL DEFAULT 'running',
+  charged_tokens integer NOT NULL,
+  usage_json text,
+  created_at integer NOT NULL,
+  completed_at integer,
+  FOREIGN KEY (user_id, run_id) REFERENCES copilot_runs(user_id, id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE INDEX idx_copilot_model_calls_run ON copilot_model_calls(user_id, run_id);
+--> statement-breakpoint
+CREATE TABLE copilot_followups (
+  id text PRIMARY KEY NOT NULL,
+  user_id text NOT NULL,
+  conversation_id text NOT NULL,
+  request_key text NOT NULL,
+  request_digest text NOT NULL,
+  input_json text NOT NULL,
+  status text NOT NULL DEFAULT 'queued',
+  run_id text,
+  error text,
+  created_at integer NOT NULL,
+  FOREIGN KEY (user_id, conversation_id) REFERENCES copilot_conversations(user_id, id) ON DELETE CASCADE,
+  FOREIGN KEY (user_id, run_id) REFERENCES copilot_runs(user_id, id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_copilot_followup_identity ON copilot_followups(user_id, conversation_id, request_key);
+--> statement-breakpoint
+CREATE INDEX idx_copilot_followup_pending ON copilot_followups(user_id, status, created_at);

package/dist/gateway/src/db/migrations/0109_copilot_research_jobs.sql

@@ -0,0 +1,19 @@
+CREATE TABLE copilot_research_jobs (
+  id text PRIMARY KEY NOT NULL,
+  user_id text NOT NULL,
+  origin_run_id text NOT NULL,
+  source_key text NOT NULL,
+  conversation_id text NOT NULL,
+  child_run_id text NOT NULL,
+  report_message_id text,
+  created_at integer NOT NULL,
+  FOREIGN KEY(user_id, origin_run_id) REFERENCES copilot_runs(user_id, id) ON DELETE CASCADE,
+  FOREIGN KEY(user_id, child_run_id) REFERENCES copilot_runs(user_id, id) ON DELETE CASCADE,
+  FOREIGN KEY(user_id, conversation_id) REFERENCES copilot_conversations(user_id, id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_copilot_research_source ON copilot_research_jobs(user_id, source_key);
+--> statement-breakpoint
+CREATE INDEX idx_copilot_research_origin ON copilot_research_jobs(user_id, origin_run_id);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_copilot_research_child ON copilot_research_jobs(user_id, child_run_id);

package/dist/gateway/src/db/migrations/0110_copilot_tool_artifacts.sql

@@ -0,0 +1,19 @@
+CREATE UNIQUE INDEX idx_copilot_step_identity ON copilot_run_steps(user_id, run_id, id);
+--> statement-breakpoint
+CREATE TABLE copilot_tool_artifacts (
+  step_id text PRIMARY KEY NOT NULL,
+  user_id text NOT NULL,
+  run_id text NOT NULL,
+  conversation_id text NOT NULL,
+  payload_json text NOT NULL,
+  content_bytes integer NOT NULL CHECK(content_bytes >= 0 AND content_bytes <= 2097152),
+  content_sha256 text NOT NULL,
+  created_at integer NOT NULL,
+  expires_at integer NOT NULL,
+  FOREIGN KEY(user_id, run_id, step_id) REFERENCES copilot_run_steps(user_id, run_id, id) ON DELETE CASCADE,
+  FOREIGN KEY(user_id, conversation_id) REFERENCES copilot_conversations(user_id, id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE INDEX idx_copilot_artifact_run ON copilot_tool_artifacts(user_id, run_id);
+--> statement-breakpoint
+CREATE INDEX idx_copilot_artifact_expiry ON copilot_tool_artifacts(user_id, expires_at);

package/dist/gateway/src/db/migrations/0111_copilot_model_metering.sql

@@ -0,0 +1,13 @@
+ALTER TABLE copilot_model_calls ADD COLUMN model_json text;
+--> statement-breakpoint
+ALTER TABLE copilot_model_calls ADD COLUMN pricing_json text;
+--> statement-breakpoint
+ALTER TABLE copilot_model_calls ADD COLUMN cost_nanousd integer;
+--> statement-breakpoint
+CREATE TABLE copilot_token_rates (
+  user_id text NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  model_profile_id text NOT NULL REFERENCES model_profiles(id) ON DELETE CASCADE,
+  rates_json text NOT NULL,
+  updated_at integer NOT NULL,
+  PRIMARY KEY(user_id,model_profile_id)
+);

package/dist/gateway/src/db/migrations/0112_copilot_repair_jobs.sql

@@ -0,0 +1,27 @@
+ALTER TABLE copilot_runs ADD COLUMN repair_revoked_at integer;
+--> statement-breakpoint
+CREATE TABLE copilot_repair_jobs (
+ id text PRIMARY KEY NOT NULL,
+ user_id text NOT NULL,
+ root_task_id text NOT NULL,
+ failed_task_id text NOT NULL,
+ origin_run_id text NOT NULL,
+ child_run_id text NOT NULL,
+ attempt integer NOT NULL CHECK(attempt BETWEEN 1 AND 2),
+ evidence_digest text NOT NULL,
+ submission_step_id text,
+ submitted_task_id text,
+ report_message_id text,
+ created_at integer NOT NULL,
+ FOREIGN KEY(user_id,root_task_id) REFERENCES copilot_development_tasks(user_id,id) ON DELETE CASCADE,
+ FOREIGN KEY(user_id,failed_task_id) REFERENCES copilot_development_tasks(user_id,id) ON DELETE CASCADE,
+ FOREIGN KEY(user_id,origin_run_id) REFERENCES copilot_runs(user_id,id) ON DELETE CASCADE,
+ FOREIGN KEY(user_id,child_run_id) REFERENCES copilot_runs(user_id,id) ON DELETE CASCADE,
+ FOREIGN KEY(user_id,submitted_task_id) REFERENCES copilot_development_tasks(user_id,id)
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_copilot_repair_attempt ON copilot_repair_jobs(user_id,root_task_id,attempt);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_copilot_repair_failed ON copilot_repair_jobs(user_id,failed_task_id);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_copilot_repair_child ON copilot_repair_jobs(user_id,child_run_id);

package/dist/gateway/src/db/migrations/0113_copilot_memory_search_index.sql

@@ -0,0 +1,19 @@
+CREATE UNIQUE INDEX idx_copilot_memory_tenant_id ON copilot_memory(user_id,id);
+--> statement-breakpoint
+CREATE TABLE copilot_memory_search_index (
+ user_id text NOT NULL,
+ memory_id text NOT NULL,
+ version text NOT NULL,
+ PRIMARY KEY(user_id,memory_id),
+ FOREIGN KEY(user_id,memory_id) REFERENCES copilot_memory(user_id,id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE TRIGGER copilot_memory_search_delete AFTER DELETE ON copilot_memory BEGIN
+ DELETE FROM copilot_memory_fts WHERE user_id=OLD.user_id AND memory_id=OLD.id;
+ DELETE FROM copilot_memory_search_index WHERE user_id=OLD.user_id AND memory_id=OLD.id;
+END;
+--> statement-breakpoint
+CREATE TRIGGER copilot_memory_search_invalidate AFTER UPDATE OF text,scope,project_id,conversation_id ON copilot_memory BEGIN
+ DELETE FROM copilot_memory_fts WHERE user_id=OLD.user_id AND memory_id=OLD.id;
+ DELETE FROM copilot_memory_search_index WHERE user_id=OLD.user_id AND memory_id=OLD.id;
+END;

package/dist/gateway/src/db/migrations/0114_channel_reliability.sql

@@ -0,0 +1,32 @@
+CREATE TABLE channel_route_sessions (
+ user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+ route_id TEXT NOT NULL, chat_type TEXT NOT NULL, chat_id TEXT NOT NULL,
+ thread_id TEXT NOT NULL DEFAULT '', conversation_id TEXT NOT NULL,
+ PRIMARY KEY(user_id,route_id,chat_type,chat_id,thread_id),
+ FOREIGN KEY(user_id,route_id) REFERENCES channel_routes(user_id,id) ON DELETE CASCADE,
+ FOREIGN KEY(user_id,conversation_id) REFERENCES copilot_conversations(user_id,id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_channel_session_conversation ON channel_route_sessions(user_id,conversation_id);
+--> statement-breakpoint
+INSERT INTO channel_route_sessions(user_id,route_id,chat_type,chat_id,conversation_id)
+ SELECT r.user_id,r.id,'p2p',i.chat_id,r.conversation_id FROM channel_routes r
+ JOIN channel_identities i ON i.user_id=r.user_id AND i.id=r.identity_id;
+--> statement-breakpoint
+ALTER TABLE channel_messages ADD COLUMN chat_id TEXT;
+--> statement-breakpoint
+DROP INDEX idx_channel_message_provider;
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_channel_message_provider ON channel_messages(user_id,account_id,chat_id,message_id);
+--> statement-breakpoint
+CREATE TABLE telegram_polling_cursors (
+ user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+ account_id TEXT NOT NULL, account_revision INTEGER NOT NULL, next_offset INTEGER NOT NULL,
+ PRIMARY KEY(user_id,account_id,account_revision)
+);
+--> statement-breakpoint
+ALTER TABLE channel_deliveries ADD COLUMN next_attempt_at INTEGER NOT NULL DEFAULT 0;
+--> statement-breakpoint
+ALTER TABLE channel_deliveries ADD COLUMN attempt_count INTEGER NOT NULL DEFAULT 0;
+--> statement-breakpoint
+ALTER TABLE channel_deliveries ADD COLUMN next_part INTEGER NOT NULL DEFAULT 0;

package/dist/gateway/src/db/migrations/0115_feishu_typing_reactions.sql

@@ -0,0 +1,12 @@
+-- Keep compensation records when a route/conversation is revoked or removed.
+CREATE TABLE feishu_typing_reactions (
+ user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+ inbox_id TEXT NOT NULL, account_id TEXT NOT NULL, app_id TEXT NOT NULL,
+ message_id TEXT NOT NULL, state TEXT NOT NULL DEFAULT 'pending', reaction_id TEXT,
+ claim_token TEXT, lease_until INTEGER, attempt_count INTEGER NOT NULL DEFAULT 0,
+ next_attempt_at INTEGER NOT NULL DEFAULT 0, reconcile_until INTEGER NOT NULL DEFAULT 0, created_at INTEGER NOT NULL,
+ PRIMARY KEY(user_id,inbox_id),
+ CONSTRAINT feishu_typing_state CHECK(state IN ('pending','adding','active','uncertain','done'))
+);
+--> statement-breakpoint
+CREATE INDEX idx_feishu_typing_due ON feishu_typing_reactions(user_id,state,next_attempt_at);

package/dist/gateway/src/db/migrations/0116_channel_control_commands.sql

@@ -0,0 +1,6 @@
+ALTER TABLE channel_messages ADD COLUMN conversation_id TEXT REFERENCES copilot_conversations(id);
+--> statement-breakpoint
+UPDATE channel_messages SET conversation_id=(SELECT r.conversation_id FROM copilot_runs r
+ WHERE r.user_id=channel_messages.user_id AND r.id=channel_messages.run_id) WHERE run_id IS NOT NULL;
+--> statement-breakpoint
+CREATE INDEX idx_channel_message_conversation ON channel_messages(user_id,conversation_id,status);

package/dist/gateway/src/db/migrations/0117_channel_session_model.sql

@@ -0,0 +1,2 @@
+-- Retain invalid selections after a model is removed; execution must fail visibly, not fall back.
+ALTER TABLE channel_route_sessions ADD COLUMN model_profile_id TEXT;

package/dist/gateway/src/db/migrations/0118_mcp_project_grants.sql

@@ -0,0 +1,2 @@
+-- NULL preserves legacy directory and account-scoped grants without expanding authority.
+ALTER TABLE mcp_access_tokens ADD COLUMN allowed_projects TEXT;

package/dist/gateway/src/db/migrations/0119_feishu_notifications.sql

@@ -0,0 +1,23 @@
+CREATE TABLE feishu_notification_settings (
+ user_id TEXT PRIMARY KEY NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+ enabled INTEGER NOT NULL DEFAULT 0, identity_id TEXT,
+ types_json TEXT NOT NULL DEFAULT '["attention","failure","completion"]',
+ web_base_url TEXT NOT NULL DEFAULT '', revision INTEGER NOT NULL DEFAULT 1,
+ updated_at INTEGER NOT NULL
+);
+--> statement-breakpoint
+-- References are resolved with tenant filtering at send time. Keep delivery history after
+-- notifications/identities are deleted; missing source records cancel unsent deliveries.
+CREATE TABLE feishu_notification_deliveries (
+ id TEXT PRIMARY KEY NOT NULL, user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+ notification_id TEXT, test_key TEXT, event_type TEXT NOT NULL,
+ subscription_revision INTEGER NOT NULL, identity_revision INTEGER NOT NULL,
+ status TEXT NOT NULL DEFAULT 'pending', error_code TEXT, provider_message_id TEXT,
+ claim_token TEXT, lease_until INTEGER, attempt_count INTEGER NOT NULL DEFAULT 0,
+ next_attempt_at INTEGER NOT NULL DEFAULT 0, expires_at INTEGER NOT NULL, created_at INTEGER NOT NULL,
+ CHECK(status IN ('pending','sending','delivered','failed','unknown','cancelled')),
+ CHECK((notification_id IS NOT NULL AND test_key IS NULL) OR (notification_id IS NULL AND test_key IS NOT NULL)),
+ UNIQUE(user_id,notification_id), UNIQUE(user_id,test_key)
+);
+--> statement-breakpoint
+CREATE INDEX idx_feishu_notification_due ON feishu_notification_deliveries(user_id,status,next_attempt_at);

package/dist/gateway/src/db/migrations/0120_feishu_notification_targets.sql

@@ -0,0 +1,25 @@
+ALTER TABLE feishu_notification_settings ADD COLUMN target_id TEXT;
+--> statement-breakpoint
+UPDATE feishu_notification_settings SET target_id='private:' || identity_id WHERE identity_id IS NOT NULL;
+--> statement-breakpoint
+ALTER TABLE feishu_notification_deliveries ADD COLUMN target_id TEXT;
+--> statement-breakpoint
+ALTER TABLE feishu_notification_deliveries ADD COLUMN target_revision INTEGER NOT NULL DEFAULT 0;
+--> statement-breakpoint
+-- Existing in-flight requests retain their outcome; old pending work is cancelled,
+-- never redirected or revived by the new notification authorization semantics.
+UPDATE feishu_notification_deliveries SET status='cancelled',error_code='TARGET_MIGRATED'
+WHERE status='pending';
+--> statement-breakpoint
+CREATE TABLE feishu_notification_groups (
+ id TEXT PRIMARY KEY NOT NULL,
+ user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+ account_id TEXT NOT NULL,
+ account_revision INTEGER NOT NULL,
+ chat_id TEXT NOT NULL,
+ name TEXT NOT NULL,
+ available INTEGER NOT NULL DEFAULT 1,
+ revision INTEGER NOT NULL DEFAULT 1,
+ checked_at INTEGER NOT NULL,
+ UNIQUE(user_id,account_id,account_revision,chat_id)
+);

package/dist/gateway/src/db/migrations/0121_session_notification_prompts.sql

@@ -0,0 +1,10 @@
+CREATE TABLE session_notification_prompts (
+ user_id TEXT NOT NULL,
+ session_id TEXT NOT NULL,
+ native_session_id TEXT NOT NULL,
+ native_turn_id TEXT NOT NULL DEFAULT '',
+ prompt TEXT NOT NULL,
+ created_at INTEGER NOT NULL,
+ PRIMARY KEY (user_id,session_id,native_session_id,native_turn_id),
+ FOREIGN KEY (user_id,session_id) REFERENCES sessions(user_id,id) ON DELETE CASCADE
+);